I run a web crawling company named Datastreamer where we license data to social media monitoring firms.
We're very white hat... Don't even like to mess around with grey hat areas as we don't want something like the Cambridge Analytica situation coming back to bite us in the ass.
About 1.5 years ago we were contacted by a 3rd party firm which we eventually found out was a cut out for Saudi Arabia.
The deal was at least $350k per year but we never got down to final negotiation. They wanted a LOT of data and also custom support and engineering. It could have easily hit $1M which is a lot of money and would have been a significant percentage of our revenue.
About a month into conversations the questions became a bit disturbing. It was clear to me that they were interested in tracking ethic minorities and trying to track down their physical location.
... you can read between the lines in the RFP.
After finding out what happened to Khashoggi I'm VERY happy about my decision.
They were using this technology to harass him on social media and I'm sure are and were tracking other people.